agentprime: opensuse-open-build-serviceEvery new CVE for opensuse-open-build-service.https://agentprime.io/CVE-2020-8031: obs: Stored XSShttps://agentprime.io/advisories/CVE-2020-8031/https://agentprime.io/advisories/CVE-2020-8031/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Feb 2021 15:10:15 GMTCVECVE-2018-12475: obs-service-download_files allows downloading from localhost or intranet hostshttps://agentprime.io/advisories/CVE-2018-12475/https://agentprime.io/advisories/CVE-2018-12475/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2020 11:55:11 GMTCVECVE-2020-8021: unauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build Servicehttps://agentprime.io/advisories/CVE-2020-8021/https://agentprime.io/advisories/CVE-2020-8021/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2020 14:25:18 GMTCVECVE-2020-8020: Persistent XSS in markdown parser used by obs-serverhttps://agentprime.io/advisories/CVE-2020-8020/https://agentprime.io/advisories/CVE-2020-8020/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2020 14:50:13 GMTCVECVE-2018-12479: Request controller allows to create requests with arbitrary request IDshttps://agentprime.io/advisories/CVE-2018-12479/https://agentprime.io/advisories/CVE-2018-12479/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Oct 2018 13:00:00 GMTCVECVE-2018-12478: obs-service-replace_using_package_version allows to specify arbitrary input fileshttps://agentprime.io/advisories/CVE-2018-12478/https://agentprime.io/advisories/CVE-2018-12478/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Oct 2018 13:00:00 GMTCVECVE-2018-12477: obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directorieshttps://agentprime.io/advisories/CVE-2018-12477/https://agentprime.io/advisories/CVE-2018-12477/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Oct 2018 13:00:00 GMTCVECVE-2018-12474: Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scmhttps://agentprime.io/advisories/CVE-2018-12474/https://agentprime.io/advisories/CVE-2018-12474/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Oct 2018 13:00:00 GMTCVECVE-2018-12473: path traversal in obs-service-tar_scmhttps://agentprime.io/advisories/CVE-2018-12473/https://agentprime.io/advisories/CVE-2018-12473/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Oct 2018 15:00:00 GMTCVECVE-2014-0594: CSRF protection incorrectly disabledhttps://agentprime.io/advisories/CVE-2014-0594/https://agentprime.io/advisories/CVE-2014-0594/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Jun 2018 17:00:00 GMTCVECVE-2013-3703: No write permission check in change_role commandhttps://agentprime.io/advisories/CVE-2013-3703/https://agentprime.io/advisories/CVE-2013-3703/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Jun 2018 17:00:00 GMTCVECVE-2018-7689: Open Build Service arbitrary package modificationhttps://agentprime.io/advisories/CVE-2018-7689/https://agentprime.io/advisories/CVE-2018-7689/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jun 2018 13:00:00 GMTCVECVE-2018-7688: Open Build Service accepts arbitrary reviewshttps://agentprime.io/advisories/CVE-2018-7688/https://agentprime.io/advisories/CVE-2018-7688/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jun 2018 13:00:00 GMTCVECVE-2017-5188: OBS worker VM escape via relative symbolic linkshttps://agentprime.io/advisories/CVE-2017-5188/https://agentprime.io/advisories/CVE-2017-5188/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Mar 2018 19:00:00 GMTCVE